summaryrefslogtreecommitdiff
path: root/system
AgeCommit message (Collapse)Author
2025-09-18[SP 2025-09-01] Fix use after free in acl_arbiterbanksia-dev Brian Delwiche
In SendPacketToPeer of acl_arbiter.cc, a buffer length is logged in one case after an intermediate call may free the buffer, leading to use after free. Log instead from the buffer's source, which has not been freed at this point in the code. Bug: 406785684 Flag: EXEMPT obvious logic fix Test: m libbluetooth Test: researcher POC Tag: #security Change-Id: Idd13399c24399d01bcd668a4b779ef1980273691 (cherry picked from commit 243d7484e59730c522640b616445b2747b3062e5)
2025-04-09IOP fix for Citizen devices Himanshu Rawat
Some Citizen devices malfunction if a read request for LE Appearance characteristics is sent. Test: mmm packages/modules/Bluetooth Flag: EXEMPT IOP fix Bug: 404674227 (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4a32c1bf903f4bf3b372a8f6fa52d8c66ca75ff7) Merged-In: I18b363f278c3d956925500586abe3c67b1e0119d Change-Id: I18b363f278c3d956925500586abe3c67b1e0119d
2025-03-24Merge "Uses the correct unit of conn interval - 1.25ms" into main Treehugger Robot
2025-03-21Merge "floss: Fix build" into main Treehugger Robot
2025-03-21Merge "Enable/Disable debug features based on build type" into main Treehugger Robot
2025-03-21Merge changes I0a52adef,I774c0dfb,Ib0decd98,I43d79ad4 into main Treehugger Robot
* changes: flag: Remove leaudio_mono_location_errata flag flag: Remove leaudio_improve_switch_during_phone_call flag flag: Remove leaudio_unicast_no_available_contexts flag flag: Remove le_audio_support_unidirectional_voice_assistant flag
2025-03-21Merge changes I9c28b437,I8256e68a into main Łukasz Rymanowski (xWF)
* changes: flag: Remove leaudio_codec_config_callback_order_fix flag flag: Remove leaudio_speed_up_reconfiguration_between_call flag
2025-03-21floss: Fix build Hsin-chen Chuang
This fixes build breakage caused by http://ag/32312459 Bug: 398195386 Bug: 393449774 Bug: 403298034 Test: m com.google.android.bt Test: floss/build/build-in-container.py Test: emerge floss Flag: EXEMPT, Floss only change Change-Id: Ib66f7399146e7c8d1588b6ce4c7efa11b8e51f2e
2025-03-20Uses the correct unit of conn interval - 1.25ms Steven Liu
Flag: EXEMPT bug fix, flag was in nextfood Bug: 397752891 Test: atest --host bluetooth_test_gd_unit Change-Id: I3ad9108a1ffadf55618a68a89102e396b084a0a2
2025-03-20Merge "Remove flag improve_create_connection_for_already_connecting_device" ↵ Jakub Pawłowski
into main
2025-03-20Merge "flag: Remove gatt_disconnect_fix flag" into main Łukasz Rymanowski (xWF)
2025-03-20flag: Remove leaudio_mono_location_errata flag Łukasz Rymanowski
Flag has been delivered Bug: 331139722 Test: mmm packages/modules/Bluetooth Flag: EXEMPT, flag cleanup Change-Id: I0a52adef9694ca6b852f52621583840252f7fb2c
2025-03-20flag: Remove leaudio_improve_switch_during_phone_call flag Łukasz Rymanowski
Flag has been delivered Bug: 369322905 Test: mmm packages/modules/Bluetooth Flag: EXEMPT, flag cleanup Change-Id: I774c0dfb9b17848d5bc1ef1e97d611f8b277437f
2025-03-20flag: Remove le_audio_support_unidirectional_voice_assistant flag Łukasz Rymanowski
Flag has been delivered Bug: 332510824 Test: mmm packages/modules/Bluetooth Flag: EXEMPT, flag cleanup Change-Id: I43d79ad4975a4844a5dad560e8ec23595bf0ffb7
2025-03-20flag: Remove leaudio_codec_config_callback_order_fix flag Łukasz Rymanowski
Flag has been delivered Bug: 326442537 Test: mmm packages/modules/Bluetooth Flag: EXEMPT, flag cleanup Change-Id: I9c28b4374fd6101b44c32f855c6d1fa04be54bd5
2025-03-20flag: Remove leaudio_speed_up_reconfiguration_between_call flag Łukasz Rymanowski
Flag has been delivered Bug: 352686917 Test: atest bluetooth_le_audio_client_test Flag: EXEMPT, flag cleanup Change-Id: I8256e68a65d543f32516094717cda14d00adad18
2025-03-20flag: Remove gatt_disconnect_fix flag Łukasz Rymanowski
Flag has been delivered Bug: 361538527 Test: mmm packages/modules/Bluetooth Flag: EXEMPT, flag cleanup Change-Id: I592acc88752e6f2b70b2702356667b904d29f710
2025-03-19Enable/Disable debug features based on build type Philip Chen
Currently we use `ro.debuggable` sysprop to proxy the build type and enable the debug features only for userdebug & eng builds (i.e. non-user builds). Since some non-production devices (e.g. Cuttlefish) could set `ro.debuggable` even for user build, let's not rely on `ro.debuggable` but directly detect the build type via `ro.build.type`. Bug: 375056207 Test: m com.android.bt Change-Id: I9c6a2e41786863315bfb89617ec914e06de4bab5
2025-03-19Merge "leaudio: Clear data path state when it is failed to be created" into main Rongxuan Liu
2025-03-19leaudio: Clear data path state when it is failed to be created Łukasz Rymanowski
Make sure that stack has valid data path state when it is failed to be set (usually due to controller issue). If the state is incorrect, stack will try to remove data path when CIS is disconnected which will lead to assert in btm_iso layer. Bug: 404423428 Flag: Exempt, day to day fix Test: atest bluetooth_le_audio_test Change-Id: I311a86cfe54ccba39ae697bdc85a53ff254e44af
2025-03-18Merge changes I4260c630,Id0fd9d5a into main Archie Pusaka
* changes: Remove forward_get_set_report_failure_to_uhid flag Remove serialize_hogp_and_dis flag
2025-03-18Remove forward_get_set_report_failure_to_uhid flag Archie Pusaka
Bug: 369748430 Test: m -j Flag: EXEMPT, flag removal Change-Id: I4260c63046152360b5815ddfea82971b67387753
2025-03-18Remove serialize_hogp_and_dis flag Archie Pusaka
Also remove the TODO to implement multiservice HoGP since there are more interop cases which requires us to distinguish the peripherals before discovering HoGP services, e.g. INTEROP_HOGP_LONG_REPORT. Bug: 367910199 Test: m -j Flag: EXEMPT, flag removal Change-Id: Id0fd9d5a328b1e97a6733308cfdf5fe50c0db6ff
2025-03-18Merge "system/btcore: Remove unused sources and headers" into main Henri Chataing
2025-03-18Merge "RemoveBond: Fix typo for pending devices awaiting removal" into main Srini S
2025-03-18Merge "system/stack/test: Fix asan error in SDP test" into main Michael Sun
2025-03-18Merge "OWNER freeze window" into main Treehugger Robot
2025-03-18Merge "Check for invalid handle before looking up device by handle" into main Treehugger Robot
2025-03-18OWNER freeze window William Escande
Bug: 381884217 Flag: EXEMPT only changing OWNERS Test: m . Change-Id: I9c8322fca831c81a158bac4765f79db00ddb061b
2025-03-18Merge "Added info logs for stack::is_running_" into main Jack He
2025-03-18Check for invalid handle before looking up device by handle Himanshu Rawat
When invalid connection handle is passed to btm_find_dev_by_handle(), it returns the first device which does not have any of the transports connected. Test: mmm packages/modules/Bluetooth Flag: EXEMPT trivial fix Bug: 399122843 Change-Id: Idedd4a65ed4517ae6bee7efda9b0f87b7096a8c2
2025-03-18RemoveBond: Fix typo for pending devices awaiting removal Srini S
Test: atest PairingTest Flag: EXEMPT Trivial Bug: 403647202 Change-Id: I17320ec284ef27e1a8477046ae236660c25a77a3
2025-03-18Merge "Cleanup flag gatt_client_dynamic_allocation." into main Treehugger Robot
2025-03-17Merge "ASHA: add basic test framework" into main Krzysztof Kopyscinski (xWF)
2025-03-17Cleanup flag gatt_client_dynamic_allocation. Omair Kamil
Bug: 348559823 Fix: 348559823 Test: m Bluetooth Flag: EXEMPT, flag cleanup Change-Id: Ibba32335117ba9cb994ff96d3320351dbfed686d
2025-03-18system/stack/test: Fix asan error in SDP test Michael Sun
Fix a memeory error found through hwasan testing. Bug: 377078141 Test: atest net_test_stack_sdp Flag: EXEMPT minor test change no logic update Change-Id: I7b26a8e3e7bcfbe4650c2ad4b35beb0ff38b8829
2025-03-17Merge "system/common: Move remaining metrics to os/metrics.h" into main Treehugger Robot
2025-03-17Merge "Check if device record is removed after BTM_LE_COMPLT_EVT event ↵ Treehugger Robot
callback" into main
2025-03-17Merge "Remove cancel_open_discovery_client flag" into main Omair Kamil
2025-03-17Merge "shim/stack: Resolve some memory leaks on stack shutdown" into main Henri Chataing
2025-03-17Merge "gd: Fix SEC_TAG_BLUETOOTH_CONNECTION event" into main Henri Chataing
2025-03-17system/common: Move remaining metrics to os/metrics.h Henri Chataing
Bug: 401588157 Test: m com.android.bt Flag: EXEMPT, no logical change Change-Id: I6a7269d1084f86d0d12ee4ba8d040a6ef441a069
2025-03-17shim/stack: Resolve some memory leaks on stack shutdown Henri Chataing
Bug: 398195386 Bug: 393449774 Bug: 403298034 Flag: EXEMPT, minor bugfix Test: m com.android.bt Change-Id: I439928b923db6eab04d79f7265a59db798d2b276
2025-03-17Merge "Dead code removal: AclManager SetLeSuggestedDefaultDataParameters" ↵ Jakub Pawłowski
into main
2025-03-17Dead code removal: AclManager SetLeSuggestedDefaultDataParameters Jakub Pawlowski
Bug: 403545449 Test: mma -j32 Flag: exempt, just removing dead code Change-Id: Id37370e3a078c1f20a22bfa4e94ee421f9ff2f23
2025-03-17Merge "Don't remove bond on encryption failure in peripheral role" into main Himanshu Rawat
2025-03-17Merge "Get rid of unnecessary boilerplate for LeSetDefaultSubrate" into main Jakub Pawłowski
2025-03-17Encrypt BR/EDR link immediately after pairing Himanshu Rawat
In the peripheral role stack does not immediately encrypt the link after BR/EDR pairing. Instead it tries to change the role first. If the role change fails, the link is not encrypted. Some remote devices don't like to concede the central role. Secured service access would eventually force the encryption but it delays potential CTKD and service discovery. Test: mmm packages/modules/Bluetooth Flag: com.android.bluetooth.flags.immediate_encryption_after_pairing Bug: 401192310 Bug: 402510244 Change-Id: I9a31ae46cb80b3bb42c6f4b0fbf957fb83876db1
2025-03-17Check if device record is removed after BTM_LE_COMPLT_EVT event callback Himanshu Rawat
BTM_LE_COMPLT_EVT event callback may remove the device record. We must check the validity of the device record before using it. Test: mmm packages/modules/Bluetooth Flag: EXEMPT nullcheck Bug: 402375492 Change-Id: I0ef8af53dac6e401278ced920e17d40925f3166c
2025-03-17gd: Fix SEC_TAG_BLUETOOTH_CONNECTION event Henri Chataing
android_log_event_list is not equivalent to an ostream formatter as each << parameter is generated as a separate parameter. The logging refactor failed to take this into account and inlined a StringPrintf call, thus increasing the parameter count. Bug: 403676434 Flag: EXEMPT, minor bug fix Test: m com.android.bt Change-Id: I10c72792232db3aef0e5b151aa967c95e604c877
generated by cgit v1.2.3-59-g8ed1b (git 2.39.0) at 2025-12-30 08:49:17 +0000